CVE-2025-32386

Name of the Vulnerable Software and Affected Versions: Helm versions prior to 3.17.3

Description: A specially crafted chart archive file can cause Helm to exhaust its memory, leading to an out-of-memory termination. This occurs when the file expands to be significantly larger uncompressed than compressed, with a difference of over 800 times. The issue is related to how Helm loads chart archive files.

Recommendations: For versions prior to 3.17.3, update to Helm v3.17.3 to resolve the issue. As a temporary workaround, ensure that any chart archive files being loaded by Helm do not contain files that are large enough to cause the Helm Client or SDK to use up available memory leading to a termination.